@easyai-canvas/canvas-plugin-sdk 0.1.0

package/LICENSE

@@ -0,0 +1,5 @@
+Copyright (c) EasyAI. All rights reserved.
+
+This package is publicly available for download. Use, modification, and
+redistribution are permitted only under a separate EasyAI customer agreement.
+The availability of this package on npm does not grant a license by itself.

package/README.md

@@ -0,0 +1,22 @@
+# EasyAI 画布插件 SDK
+
+此包提供画布插件的公开协议、业务声明 API、Vue 组件上下文、项目脚手架、构建工具与独立服务运行时。插件以管理员审核的受信代码运行。
+
+SDK 为商业专有软件。npm 公开下载不自动授予使用或再分发许可，具体权限以 EasyAI 客户协议为准。
+
+```bash
+npx @easyai-canvas/canvas-plugin-sdk init my-plugin
+cd my-plugin
+npm run dev
+npm run test:contract
+npm run build
+npm start
+```
+
+`init --template node|action|combined` 选择项目类型；`--no-install` 跳过依赖安装。开发工作台位于 `http://localhost:4310/studio`，由浏览器完成 EasyAI 平台授权。`npm run build` 输出 `dist/plugin.zip`，可由管理员导入平台托管，或用 `npm start` 运行独立插件服务。
+
+平台托管只接纳运行不超过 20 秒的节点任务；需要长任务、GPU 或自有基础设施时使用独立服务。构建还会生成 `dist/plugin.zip.sha256` 供管理员核对。独立服务生产环境必须提供 `PLUGIN_SERVICE_SIGNING_SECRET`、与平台连接 ID 一致的 `PLUGIN_SERVICE_AUDIENCE` 和持久化的 `PLUGIN_DATA_DIR`。业务密钥放在插件配置或部署环境，不写入前端组件。
+
+托管节点暂不支持文件和画布宿主能力。管理员导入 ZIP 后默认停用，审核插件代码、声明能力和版本摘要后启用。版本切换不会改变已提交任务使用的包摘要。
+
+公开导入路径：`@easyai-canvas/canvas-plugin-sdk`、`@easyai-canvas/canvas-plugin-sdk/protocol`、`@easyai-canvas/canvas-plugin-sdk/ui`。客户项目不需访问 EasyAI 画布源码。

package/bin/easyai-plugin.mjs

@@ -0,0 +1,267 @@
+#!/usr/bin/env node
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, watch } from 'node:fs';
+import { mkdir, readFile, readdir, writeFile } from 'node:fs/promises';
+import net from 'node:net';
+import { basename, dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const packageRoot = fileURLToPath(new URL('..', import.meta.url));
+const metadata = JSON.parse(await readFile(join(packageRoot, 'package.json'), 'utf8'));
+const runtimeEntry = join(packageRoot, 'dist/customer-main.js');
+const builderEntry = join(packageRoot, 'tools/build-plugin-package.mjs');
+const cwd = process.cwd();
+const command = process.argv[2];
+const args = process.argv.slice(3);
+
+function fail(message) { throw new Error(message); }
+function nodeVersion() {
+  const [major, minor] = process.versions.node.split('.').map(Number);
+  if (major !== 22 || minor < 22) fail('请使用 Node 22.22.0 或更新的 Node 22 版本');
+}
+function safeName(value) {
+  const name = value.toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '');
+  if (!name || name.length > 50) fail('项目目录名需包含英文字母或数字，且不超过 50 个字符');
+  return name;
+}
+function pluginSource(id, title, template) {
+  const node = template !== 'action';
+  const action = template !== 'node';
+  return `import { definePlugin, defineNode } from '${metadata.name}';
+import { PROTOCOL } from '${metadata.name}/protocol';
+
+export default definePlugin({
+  manifest: {
+    protocol: PROTOCOL, id: '${id}', name: '${title}', release: '1',
+    contributes: {
+      ${node ? `nodes: [defineNode({
+        type: '${id}.echo', name: '文本回显', execution: 'remote',
+        inputs: [], outputs: [{ id: 'out', type: 'text' }],
+        parameters: [{ key: 'text', label: '文本', type: 'string', default: '你好，画布' }],
+        ui: { preview: 'EchoPreview', panel: 'EchoPanel' }, timeoutMs: 20000,
+      })],` : ''}
+      ${action ? `actions: [{
+        id: 'select-image', name: '添加图片链接', action: 'asset-selection',
+        presentation: 'dialog', mediaTypes: ['image'], maxCount: 1,
+        ui: { component: 'ImageSelector' }, menu: { group: 'resources' },
+      }],` : ''}
+    },
+  },
+  handlers: {${node ? `
+    '${id}.echo': request => ({ outputs: { out: {
+      type: 'text', payload: { items: [{ content: String(request.parameters.text ?? '') }] },
+    } } }),` : ''}
+  },
+});
+`;
+}
+function uiSource(template) {
+  const node = template !== 'action';
+  const action = template !== 'node';
+  return `import { defineComponent, h, ref } from 'vue';
+${node ? `import { usePluginNode } from '${metadata.name}/ui';` : ''}
+${action ? `import { usePluginAction } from '${metadata.name}/ui';` : ''}
+
+${node ? `export const EchoPreview = defineComponent({ setup() {
+  const ctx = usePluginNode();
+  return () => h('p', String((ctx.output.value?.payload.items as Array<{ content: string }> | undefined)?.[0]?.content ?? '等待执行'));
+} });
+
+export const EchoPanel = defineComponent({ setup() {
+  const ctx = usePluginNode();
+  return () => h('div', [
+    h('input', { value: String(ctx.parameters.value.text ?? ''),
+      onInput: (event: Event) => ctx.updateParameters({ text: (event.target as HTMLInputElement).value }) }),
+    h('button', { onClick: () => ctx.execute() }, '运行'),
+  ]);
+} });` : ''}
+${action ? `export const ImageSelector = defineComponent({ setup() {
+  const ctx = usePluginAction();
+  const url = ref('');
+  const error = ref('');
+  return () => h('div', [
+    h('label', ['图片 HTTPS 地址', h('input', { value: url.value,
+      onInput: (event: Event) => { url.value = (event.target as HTMLInputElement).value; } })]),
+    h('button', { onClick: async () => {
+      try { await ctx.submit([{ type: 'image', url: url.value }]); }
+      catch (cause) { error.value = cause instanceof Error ? cause.message : '添加失败'; }
+    } }, '添加到画布'),
+    error.value ? h('p', { role: 'alert' }, error.value) : null,
+  ]);
+} });` : ''}
+`;
+}
+function testSource(id, template) {
+  const node = template !== 'action';
+  const action = template !== 'node';
+  return `import test from 'node:test';
+import assert from 'node:assert/strict';
+import plugin from '../src/plugin.ts';
+import { validateManifest, validateResult } from '${metadata.name}/protocol';
+
+test('插件声明和业务处理器符合画布契约', async () => {
+  const manifest = validateManifest(plugin.manifest);
+  assert.equal(manifest.id, '${id}');
+  ${node ? `const definition = manifest.contributes.nodes![0]!;
+  const result = await plugin.handlers[definition.type]!({
+    executionId: 'contract-test', pluginId: manifest.id, nodeType: definition.type,
+    parameters: { text: '测试' }, inputsByPort: {}, context: { nodeId: 'n1', userId: 'u1' },
+  }, {} as never);
+  const items = validateResult(result, definition).outputs.out.payload.items as Array<{ content: string }>;
+  assert.equal(items[0]?.content, '测试');` : ''}
+  ${action ? `assert.equal(manifest.contributes.actions?.[0]?.action, 'asset-selection');` : ''}
+});
+`;
+}
+async function init() {
+  const templateArg = args.find(arg => arg.startsWith('--template='));
+  const template = templateArg?.slice('--template='.length) ?? (args.includes('--template') ? args[args.indexOf('--template') + 1] : 'node');
+  if (!['node', 'action', 'combined'].includes(template)) fail('模板只支持 node、action 或 combined');
+  const targetArg = args.find((arg, index) => !arg.startsWith('--') && args[index - 1] !== '--template');
+  if (!targetArg) fail('用法：easyai-plugin init <目录> [--template node|action|combined] [--no-install]');
+  const target = resolve(targetArg);
+  if (existsSync(target) && (await readdir(target)).length) fail('目标目录非空，不会覆盖已有文件');
+  const slug = safeName(basename(target));
+  const id = `customer.${slug.replaceAll('-', '.')}`;
+  const title = slug.replaceAll('-', ' ');
+  await mkdir(join(target, 'src'), { recursive: true });
+  await mkdir(join(target, 'test'), { recursive: true });
+  const spec = process.env.EASYAI_SDK_INSTALL_SPEC ?? metadata.version;
+  const project = {
+    name: slug, version: '0.1.0', private: true, type: 'module',
+    scripts: { dev: 'easyai-plugin dev', 'test:contract': 'easyai-plugin test:contract',
+      build: 'easyai-plugin build', start: 'easyai-plugin start', doctor: 'easyai-plugin doctor' },
+    dependencies: { [metadata.name]: spec, vue: '3.5.21' },
+    devDependencies: { '@types/node': '22.20.1', tsx: '4.20.5', typescript: '5.9.2' },
+  };
+  const files = {
+    'package.json': `${JSON.stringify(project, null, 2)}\n`,
+    'src/plugin.ts': pluginSource(id, title, template),
+    'src/ui.ts': uiSource(template),
+    'test/plugin.test.ts': testSource(id, template),
+    '.gitignore': 'node_modules/\ndist/\n.easyai-plugin/\n.env\n',
+    '.env.example': 'PORT=4310\nPLUGIN_DATA_DIR=./.easyai-plugin\nPLUGIN_AUTH_MODE=token\nPLUGIN_SERVICE_AUDIENCE=customer-plugin\n# PLUGIN_SERVICE_SIGNING_SECRET=由部署环境安全注入\n',
+    'Dockerfile': 'FROM node:22.22.0\nWORKDIR /app\nCOPY package*.json ./\nRUN npm ci --omit=dev\nCOPY dist/plugin.zip ./dist/plugin.zip\nENV NODE_ENV=production PLUGIN_BUILTINS=0\nCMD ["npm", "start"]\n',
+    'README.md': `# ${title}\n\n运行 npm run dev，打开 http://localhost:4310/studio，在浏览器中连接 EasyAI 画布。\n运行 npm run test:contract && npm run build 生成 dist/plugin.zip 和 dist/plugin.zip.sha256。\n独立部署时配置插件服务签名密钥并运行 npm start；平台托管时由管理员审核并导入 ZIP。\n`,
+    'tsconfig.json': JSON.stringify({ compilerOptions: { target: 'ES2022', module: 'NodeNext', moduleResolution: 'NodeNext', strict: true, skipLibCheck: true, allowImportingTsExtensions: true, lib: ['ES2022', 'DOM'], types: ['node'], noEmit: true }, include: ['src/**/*.ts', 'test/**/*.ts'] }, null, 2) + '\n',
+  };
+  for (const [path, content] of Object.entries(files)) await writeFile(join(target, path), content, { flag: 'wx' });
+  console.log(`已创建 ${target}（${template}）`);
+  if (!args.includes('--no-install')) await run('npm', ['install'], target);
+  console.log(`下一步：cd ${target} && npm run dev`);
+}
+async function run(executable, argv, directory = cwd, env = process.env) {
+  await new Promise((resolvePromise, reject) => {
+    const child = spawn(executable, argv, { cwd: directory, env, stdio: 'inherit' });
+    child.once('error', reject);
+    child.once('exit', code => code === 0 ? resolvePromise() : reject(new Error(`${executable} 退出码 ${code}`)));
+  });
+}
+async function build() {
+  nodeVersion();
+  for (const path of ['src/plugin.ts', 'src/ui.ts']) if (!existsSync(join(cwd, path))) fail(`缺少 ${path}`);
+  const { buildPluginPackage } = await import(builderEntry);
+  const output = join(cwd, 'dist/plugin.zip');
+  await buildPluginPackage({ serverEntry: join(cwd, 'src/plugin.ts'), uiEntry: join(cwd, 'src/ui.ts'),
+    globalName: `EasyAIPlugin${createHash('sha256').update(cwd).digest('hex').slice(0, 12)}`, output });
+  const bytes = await readFile(output);
+  const { inspectPluginPackage } = await import(join(packageRoot, 'dist/runtime/package-runtime.js'));
+  await inspectPluginPackage(bytes);
+  const digest = createHash('sha256').update(bytes).digest('hex');
+  await writeFile(`${output}.sha256`, `${digest}  plugin.zip\n`);
+  console.log(`SHA-256 ${digest}（dist/plugin.zip.sha256）`);
+}
+function serviceEnv(dev) {
+  const zip = join(cwd, 'dist/plugin.zip');
+  if (!existsSync(zip)) fail('缺少 dist/plugin.zip；请先运行 npm run build');
+  if (!existsSync(runtimeEntry)) fail('SDK 运行时未构建');
+  if (!dev && !process.env.PLUGIN_SERVICE_SIGNING_SECRET) fail('生产服务需要 PLUGIN_SERVICE_SIGNING_SECRET');
+  return { ...process.env, NODE_ENV: dev ? 'development' : 'production',
+    PLUGIN_BUILTINS: '0', PLUGIN_PACKAGES: JSON.stringify([zip]),
+    PLUGIN_DATA_DIR: process.env.PLUGIN_DATA_DIR ?? join(cwd, '.easyai-plugin'),
+    ...(dev ? { PLUGIN_AUTH_MODE: 'local', PLUGIN_BIND: '127.0.0.1', PLUGIN_DEV_WATCH: '1' } : {}) };
+}
+async function start() {
+  nodeVersion();
+  await run(process.execPath, [runtimeEntry], cwd, serviceEnv(false));
+}
+async function dev() {
+  await build();
+  let child;
+  const dataDir = process.env.PLUGIN_DATA_DIR ?? join(cwd, '.easyai-plugin');
+  await mkdir(dataDir, { recursive: true });
+  const status = async (state, message = '') => writeFile(join(dataDir, 'dev-build-status.json'),
+    JSON.stringify({ state, message: message.slice(0, 500), updatedAt: new Date().toISOString() }));
+  const launch = () => {
+    child = spawn(process.execPath, [runtimeEntry], { cwd, env: serviceEnv(true), stdio: 'inherit' });
+    child.on('error', error => console.error(error));
+  };
+  await status('ready');
+  launch();
+  console.log(`真实画布调试工作台：http://localhost:${process.env.PORT ?? 4310}/studio`);
+  let timer;
+  let building = false;
+  const sourceWatcher = watch(join(cwd, 'src'), { recursive: true }, () => {
+    clearTimeout(timer);
+    timer = setTimeout(async () => {
+      if (building) return;
+      building = true;
+      await status('building');
+      try {
+        await build();
+        child?.kill('SIGTERM');
+        await new Promise(resolvePromise => child?.once('exit', resolvePromise));
+        launch();
+        await status('ready');
+      } catch (error) {
+        await status('error', String(error));
+        console.error(error);
+      } finally { building = false; }
+    }, 350);
+  });
+  const close = () => { sourceWatcher.close(); child?.kill('SIGTERM'); process.exit(0); };
+  process.once('SIGINT', close);
+  process.once('SIGTERM', close);
+}
+async function contractTest() {
+  await build();
+  const tests = (await readdir(join(cwd, 'test'))).filter(name => name.endsWith('.test.ts'));
+  if (!tests.length) fail('缺少 test/*.test.ts 契约测试');
+  await run(process.execPath, ['--import', 'tsx', '--test', ...tests.map(name => join(cwd, 'test', name))]);
+}
+async function doctor() {
+  const checks = [];
+  const [major, minor] = process.versions.node.split('.').map(Number);
+  checks.push({ name: 'Node 22.22+', ok: major === 22 && minor >= 22 });
+  checks.push({ name: '插件入口', ok: existsSync(join(cwd, 'src/plugin.ts')) });
+  checks.push({ name: 'UI 入口', ok: existsSync(join(cwd, 'src/ui.ts')) });
+  const port = Number(process.env.PORT ?? 4310);
+  const available = await new Promise(resolvePromise => {
+    const server = net.createServer();
+    server.once('error', () => resolvePromise(false));
+    server.listen(port, '127.0.0.1', () => server.close(() => resolvePromise(true)));
+  });
+  checks.push({ name: `本地端口 ${port}`, ok: available });
+  const platform = args.find(arg => arg.startsWith('--platform='))?.slice('--platform='.length);
+  if (platform) {
+    const url = new URL('/.well-known/easyai-plugin-debug', platform);
+    const response = await fetch(url, { signal: AbortSignal.timeout(8000) }).catch(() => null);
+    checks.push({ name: '平台调试连接', ok: response?.ok === true });
+  }
+  for (const check of checks) console.log(`${check.ok ? '✓' : '✗'} ${check.name}`);
+  if (checks.some(check => !check.ok)) process.exitCode = 1;
+}
+
+try {
+  if (command === 'init') await init();
+  else if (command === 'dev') await dev();
+  else if (command === 'test:contract') await contractTest();
+  else if (command === 'build') await build();
+  else if (command === 'start') await start();
+  else if (command === 'doctor') await doctor();
+  else fail('用法：easyai-plugin <init|dev|test:contract|build|start|doctor>');
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exitCode = 1;
+}

package/dist/customer-main.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/customer-main.js

@@ -0,0 +1,256 @@
+import { createServer } from 'node:http';
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { Runtime } from './runtime/engine.js';
+import { loadPackagedPlugins } from './runtime/packaged-plugins.js';
+import { authenticate } from './runtime/auth.js';
+import { RemoteStudioConnector } from './studio/remote-connector.js';
+import { ContractError, object, validatePluginRuntimeContext } from './protocol/index.js';
+const dataDir = resolve(process.env.PLUGIN_DATA_DIR ?? './.easyai-plugin');
+const port = Number(process.env.PORT ?? 4310);
+const packaged = await loadPackagedPlugins(JSON.parse(process.env.PLUGIN_PACKAGES ?? '[]'), join(dataDir, 'packages'));
+const runtime = new Runtime(join(dataDir, 'runtime.sqlite'), packaged.plugins, packaged.presentations, packaged.executionEntries);
+const studio = new RemoteStudioConnector();
+if (process.env.PLUGIN_DEV_WATCH === '1') {
+    for (const plugin of packaged.plugins) {
+        const entry = runtime.catalog().plugins.find(item => item.manifest.id === plugin.manifest.id);
+        if (entry && !entry.enabled)
+            runtime.configure(plugin.manifest.id, { enabled: true });
+    }
+}
+function send(response, status, value, type = 'application/json') {
+    response.writeHead(status, { 'Content-Type': type, 'Cache-Control': 'no-store' });
+    response.end(type === 'application/json' ? JSON.stringify(value) : value);
+}
+function redirect(response, path) {
+    response.writeHead(302, { Location: path });
+    response.end();
+}
+async function body(request) {
+    const chunks = [];
+    let size = 0;
+    for await (const part of request) {
+        const chunk = Buffer.from(part);
+        size += chunk.length;
+        if (size > 2_000_000)
+            throw new ContractError('请求内容超过限制', 413);
+        chunks.push(chunk);
+    }
+    if (!chunks.length)
+        return {};
+    try {
+        return object(JSON.parse(Buffer.concat(chunks).toString('utf8')));
+    }
+    catch {
+        throw new ContractError('请求 JSON 无效', 400);
+    }
+}
+function localStudio(request) {
+    if (process.env.NODE_ENV === 'production' || !['127.0.0.1', '::1', '::ffff:127.0.0.1'].includes(request.socket.remoteAddress ?? ''))
+        throw new ContractError('本地调试工作台仅供本机开发使用', 403);
+}
+async function devBuildStatus() {
+    if (process.env.PLUGIN_DEV_WATCH !== '1' || process.env.NODE_ENV === 'production')
+        return undefined;
+    return readFile(join(dataDir, 'dev-build-status.json'), 'utf8')
+        .then(value => JSON.parse(value)).catch(() => ({ state: 'ready' }));
+}
+async function studioCatalog() {
+    const catalog = runtime.catalog();
+    const status = studio.status();
+    const devBuild = await devBuildStatus();
+    return {
+        protocol: 'easyai.plugin-debug/v1', devBuild, platformOrigin: status.platformOrigin,
+        connectionId: status.connectionId, connectionPhase: status.phase,
+        plugins: catalog.plugins.map(entry => {
+            const bundle = entry.uiBundle;
+            const origin = `http://localhost:${port}`;
+            const uiBundle = bundle ? { ...bundle, url: new URL(bundle.url, origin).href,
+                ...(bundle.cssUrl ? { cssUrl: new URL(bundle.cssUrl, origin).href } : {}) } : undefined;
+            return {
+                id: entry.manifest.id, name: entry.manifest.name, release: entry.manifest.release,
+                enabled: entry.enabled, manifest: entry.manifest, uiBundle,
+                nodes: entry.manifest.contributes.nodes?.length ?? 0,
+                actions: entry.manifest.contributes.actions?.length ?? 0,
+                package: packaged.downloads[entry.manifest.id] ? { mode: 'download' } : null,
+                buildKey: createHash('sha256').update(JSON.stringify({ revision: catalog.revision, entry })).digest('hex'),
+            };
+        }),
+    };
+}
+const server = createServer(async (request, response) => {
+    try {
+        const method = request.method ?? 'GET';
+        const path = new URL(request.url ?? '/', `http://localhost:${port}`).pathname;
+        const allowedOrigins = (process.env.PLUGIN_ALLOWED_ORIGINS ?? (process.env.NODE_ENV === 'production'
+            ? '' : 'http://localhost:3000,http://127.0.0.1:3000')).split(',').map(s => s.trim()).filter(Boolean);
+        if (request.headers.origin && allowedOrigins.includes(request.headers.origin)) {
+            response.setHeader('Access-Control-Allow-Origin', request.headers.origin);
+            response.setHeader('Vary', 'Origin');
+            response.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');
+            response.setHeader('Access-Control-Allow-Methods', 'GET, POST, PATCH, OPTIONS');
+        }
+        if (method === 'OPTIONS') {
+            response.writeHead(204);
+            response.end();
+            return;
+        }
+        if (path === '/') {
+            redirect(response, process.env.NODE_ENV === 'production' ? '/health' : '/studio');
+            return;
+        }
+        if (method === 'GET' && path === '/health') {
+            send(response, 200, { ready: true, protocol: 'easyai.plugin/v1' });
+            return;
+        }
+        const asset = /^\/packages\/([a-f0-9]{64})\/(ui\/plugin\.(?:js|css))$/.exec(path);
+        if (method === 'GET' && asset) {
+            const item = Object.values(packaged.presentations).find((value) => [value.uiBundle?.url, value.uiBundle?.cssUrl].includes(path));
+            if (!item)
+                throw new ContractError('插件界面资源不存在', 404);
+            const bytes = await readFile(join(dataDir, 'packages', asset[1], asset[2]));
+            response.writeHead(200, { 'Content-Type': path.endsWith('.css') ? 'text/css' : 'text/javascript',
+                'Cache-Control': 'public, max-age=31536000, immutable' });
+            response.end(bytes);
+            return;
+        }
+        if (path.startsWith('/v1/')) {
+            try {
+                await authenticate(request.headers.authorization, method === 'PATCH' || path.endsWith('/check'));
+            }
+            catch {
+                throw new ContractError('认证失败', 401, 'UNAUTHORIZED');
+            }
+            if (method === 'GET' && path === '/v1/catalog') {
+                send(response, 200, { ...runtime.catalog(), devBuild: await devBuildStatus() });
+                return;
+            }
+            const plugin = /^\/v1\/plugins\/([A-Za-z0-9_.-]+)$/.exec(path);
+            if (method === 'PATCH' && plugin) {
+                send(response, 200, runtime.configure(plugin[1], await body(request)));
+                return;
+            }
+            const check = /^\/v1\/plugins\/([A-Za-z0-9_.-]+)\/check$/.exec(path);
+            if (method === 'POST' && check) {
+                send(response, 200, await runtime.checkConfig(check[1]));
+                return;
+            }
+            const query = /^\/v1\/plugins\/([A-Za-z0-9_.-]+)\/queries\/([A-Za-z0-9_.-]+)$/.exec(path);
+            if (method === 'POST' && query) {
+                const input = await body(request);
+                const abort = new AbortController();
+                const disconnected = () => { if (!response.writableEnded)
+                    abort.abort(); };
+                response.once('close', disconnected);
+                try {
+                    send(response, 200, await runtime.query(query[1], query[2], object(input.input, 'input'), validatePluginRuntimeContext(input.context), abort.signal));
+                }
+                finally {
+                    response.removeListener('close', disconnected);
+                }
+                return;
+            }
+            const normalize = /^\/v1\/plugins\/([A-Za-z0-9_.-]+)\/normalize$/.exec(path);
+            if (method === 'POST' && normalize) {
+                const input = await body(request);
+                send(response, 200, runtime.normalize(normalize[1], String(input.nodeType ?? ''), object(input.parameters, 'parameters')));
+                return;
+            }
+            if (method === 'POST' && path === '/v1/executions') {
+                send(response, 200, runtime.submit(await body(request)));
+                return;
+            }
+            const execution = /^\/v1\/executions\/([A-Za-z0-9_.-]+)$/.exec(path);
+            if (method === 'GET' && execution) {
+                const record = runtime.store.getExecution(execution[1]);
+                if (!record)
+                    throw new ContractError('任务不存在', 404, 'TASK_NOT_FOUND');
+                send(response, 200, record);
+                return;
+            }
+            const cancel = /^\/v1\/executions\/([A-Za-z0-9_.-]+)\/cancel$/.exec(path);
+            if (method === 'POST' && cancel) {
+                send(response, 200, runtime.cancel(cancel[1]));
+                return;
+            }
+        }
+        if (path.startsWith('/studio')) {
+            localStudio(request);
+            if (method === 'GET' && path === '/studio') {
+                if (request.headers.host?.startsWith('127.0.0.1:')) {
+                    redirect(response, `http://localhost:${port}/studio`);
+                    return;
+                }
+                const html = await readFile(new URL('./studio/index.html', import.meta.url), 'utf8');
+                send(response, 200, html, 'text/html; charset=utf-8');
+                return;
+            }
+            if (method === 'GET' && path === '/studio/catalog') {
+                send(response, 200, await studioCatalog());
+                return;
+            }
+            if (method === 'GET' && path === '/studio/status') {
+                send(response, 200, studio.status());
+                return;
+            }
+            if (method === 'POST' && path === '/studio/connect') {
+                const input = await body(request);
+                send(response, 200, await studio.begin(String(input.platformUrl ?? '')));
+                return;
+            }
+            if (method === 'DELETE' && path === '/studio/connect') {
+                await studio.disconnect();
+                send(response, 200, { disconnected: true });
+                return;
+            }
+            if (method === 'POST' && path === '/studio/open') {
+                const input = await body(request);
+                send(response, 200, await studio.openDebugSession(String(input.pluginId ?? '')));
+                return;
+            }
+            if (method === 'POST' && path === '/studio/embed-ticket') {
+                const input = await body(request);
+                send(response, 200, await studio.createEmbedTicket(String(input.debugSessionId ?? ''), String(input.codeChallenge ?? '')));
+                return;
+            }
+            if (method === 'GET' && path === '/studio/oauth/callback') {
+                const url = new URL(request.url ?? '', `http://localhost:${port}`);
+                await studio.complete(url.searchParams.get('code') ?? '', url.searchParams.get('state') ?? '');
+                send(response, 200, `<!doctype html><meta charset="utf-8"><p>连接成功，可以返回插件工作台。</p><script>window.opener?.postMessage({type:'plugin-debug-auth-complete'},'http://localhost:${port}');window.close()</script>`, 'text/html; charset=utf-8');
+                return;
+            }
+            const download = /^\/studio\/packages\/([A-Za-z0-9_.-]+)\/download$/.exec(path);
+            if (method === 'POST' && download) {
+                const origin = request.headers.origin;
+                if (origin && ![`http://localhost:${port}`, `http://127.0.0.1:${port}`, `http://[::1]:${port}`].includes(origin))
+                    throw new ContractError('插件包下载来源无效', 403, 'INVALID_ORIGIN');
+                const item = packaged.downloads[download[1]];
+                if (!item)
+                    throw new ContractError('插件包不存在', 404);
+                response.writeHead(200, { 'Content-Type': 'application/zip', 'Cache-Control': 'no-store',
+                    'Content-Disposition': `attachment; filename="${download[1]}.zip"` });
+                response.end(item.bytes);
+                return;
+            }
+        }
+        throw new ContractError('接口不存在', 404);
+    }
+    catch (error) {
+        const status = error instanceof ContractError ? error.status : 500;
+        send(response, status, { error: status === 500 ? '插件服务异常' : error.message,
+            code: error instanceof ContractError ? error.code : 'PLUGIN_ERROR' });
+    }
+});
+server.listen(port, process.env.PLUGIN_BIND ?? (process.env.NODE_ENV === 'production' ? '0.0.0.0' : '127.0.0.1'));
+let shuttingDown = false;
+for (const signal of ['SIGINT', 'SIGTERM'])
+    process.on(signal, async () => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        server.close();
+        await studio.disconnect();
+        await runtime.close();
+        process.exit(0);
+    });